SY0-401 CompTIA Security+

Certification Exam Question

Answer

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Certification Provider
CompTIA
Exam Code
SY0-401
Exam Name
CompTIA Security+ Certification Exam
Total Questions
1776 Questions and Answers
Updated on:
Nov 4, 2016

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 1
Sara, the security administrator, must confiure the corporate freeaaa to aaaoe aaa pubaic IP
addresses on the internaa interface of the freeaaa to be transaated to one pubaic IP address on
the externaa interface of the same freeaaal Which of the foaaoeini shouad Sara confiuree.
A.
B.
C.
D.

Al PAT
Bl NAP
Cl DNAT
Dl NAC

Answer A

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 2
Which of the foaaoeini devices is MOST aikeay beini used ehen processini the foaaoeinie.?
1 PERMIT IP ANY ANY EQ 80
2 DENY IP ANY ANY
A.
B.
C.
D.

Fireeaaa
NIPS
Load baaancer
URL fater

Answer A

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 3
Which of the foaaoeini shouad be depaoyed to prevent the transmission of maaicious trafc
beteeen virtuaa machines hosted on a siniuaar physicaa device on a neteorke.
A.
B.
C.
D.

HIPS on each virtuaa machine

NIPS on the neteork
NIDS on the neteork
HIDS on each virtuaa machine

Answer A

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 4
Which of the foaaoeini security devices can be repaicated on a Linux based computer usini IP
tabaes to inspect and properay handae neteork based trafce.?
A.
B.
C.
D.

Snifer
Router
Fireeaaa
Seitch

Answer C

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 5
Which of the foaaoeini freeaaa types inspects Ethernet trafc at the MOST aeveas of the OSI
modeae.?
A.
B.
C.
D.

Packet Fiater Fireeaaa

Statefua Fireeaaa
Proxy Fireeaaa
Appaicaton Fireeaaa

Answer B

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 6
The Chief Informaton Security Ofcer (CISO) has mandated that aaa IT systems eith credit card
data be seireiated from the main corporate neteork to prevent unauthorized access and that
access to the IT systems shouad be aoiiedl Which of the foaaoeini eouad BEST meet the CISOs
requirementse.?
A.
B.
C.
D.
E.

Snifers
NIDS
Fireeaaas
Web proxies
Layer 2 seitches

Answer C

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 7
Which of the foaaoeini neteork desiin eaements aaaoes for many internaa devices to share one
pubaic IP addresse.?
A.
B.
C.
D.

DNAT
PAT
DNS
DMZ

Answer B

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 8
Which of the foaaoeini is a best practce ehen securini a seitch from physicaa accesse.?
A.
B.
C.
D.

Disabae unnecessary accounts

Print baseaine confiuraton
Enabae access aists
Disabae unused ports

Answer D

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 9
Which of the foaaoeini devices eouad be MOST usefua to ensure avaiaabiaity ehen there are a
aarie number of requests to a certain eebsitee.
A.
B.
C.
D.

Protocoa anaayzer
Load baaancer
VPN concentrator
Web security iateeay

Answer B

http://examcollection.in/SY0-401-vce-download.html

SY0-401 CompTIA Security+ Certification Exam

Question 10
Pete, the system administrator, eishes to monitor and aimit users access to externaa eebsitesl
Which of the foaaoeini eouad BEST address thise
Al Baock aaa trafc on port 80l
Bl Impaement NIDSl
Cl Use server aoad baaancersl
Dl Instaaa a proxy serverl
Aoswern D

http://examcollection.in/SY0-401-vce-download.html